The AZ-500 exam has been retired

It was retired on August 31, 2026. It was replaced by SC-500 (Microsoft Cloud and AI Security Engineer). Go to the SC-500 study guide

Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.

3.2.1. Virtual Network Peering and VPN Gateway

💡 First Principle: Virtual network peering connects VNets within Azure using Microsoft's backbone network. VPN gateways provide encrypted tunnels for connecting to on-premises networks or other cloud providers.

Connection Options Comparison

OptionUse CaseBandwidthEncryption
VNet PeeringAzure-to-Azure same regionVery highNot encrypted by default
Global VNet PeeringAzure-to-Azure cross-regionHighNot encrypted by default
Site-to-Site VPNAzure to on-premisesUp to 10 GbpsIPsec encrypted
Point-to-Site VPNIndividual client to AzureLimitedIPsec/SSL encrypted
ExpressRoutePrivate connection to AzureUp to 100 GbpsNot encrypted by default
See how it connects
Alvin Varughese
Written byAlvin Varughese
Founder20 professional certifications